{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxZnKxjXeESPO0dycoRd9yhw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:37:19.234Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "f376d682c91ac308d40a239f86cca57a", "pushOnlyResponseType": "OV_RESPONSE_APPROVE", "requestId": "9e4a2d75756d823797ce31e28574e03f", "authenticatorMethodChallengeTime": "2024-03-18T16:37:15.263Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/fta3StJBEz_EvaeteWq5dCS8lvhauecfs0/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/fta3StJBEz_EvaeteWq5dCS8lvhauecfs0/verify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "9e4a2d75756d823797ce31e28574e03f", "detail": {}}, "uuid": "c991bec8-e545-11ee-b8e7-f9c990bca30b", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification", "methodUsedVerifiedProperties": "[USER_PRESENCE, DEVICE_BOUND, HARDWARE_PROTECTED]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxZnKxjXeESPO0dycoRd9yhw"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:37:15.258Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "f376d682c91ac308d40a239f86cca57a", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "41da981cd7234b87f7a7c70198e18369", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "41da981cd7234b87f7a7c70198e18369", "detail": {}}, "uuid": "c7330dc9-e545-11ee-b7fa-916c86791edf", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx8gY6RvUfQ62dtpFCYoTUFg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:37:09.358Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "84ff02fe3a43ae2762594dbc148ca13f", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "943a0e643d66df996c99d50f235a74cb", "authenticatorMethodChallengeTime": "2024-03-18T16:37:06.247Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ft9zl6yXW_GS3o-D_Ei9MOo_K61BmmcgVF/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ft9zl6yXW_GS3o-D_Ei9MOo_K61BmmcgVF/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "943a0e643d66df996c99d50f235a74cb", "detail": {}}, "uuid": "c3aec8eb-e545-11ee-bb53-1129838dedec", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx8gY6RvUfQ62dtpFCYoTUFg"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:37:06.242Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "84ff02fe3a43ae2762594dbc148ca13f", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "9f74fa692bfa01038659404e0dc3c4ad", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "9f74fa692bfa01038659404e0dc3c4ad", "detail": {}}, "uuid": "c1d35228-e545-11ee-a645-edc9f31dce57", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx9VoQ-hwIR4STUicVwCbDKA"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:36:59.929Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "7b5223c6d01d72cda988136c10187fc2", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "5a434785c4c11876ab378ee0c24bd68f", "authenticatorMethodChallengeTime": "2024-03-18T16:36:57.096Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftr9gtJbM9-E5RbQUopNKW3QmTyV_kEZ8a/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftr9gtJbM9-E5RbQUopNKW3QmTyV_kEZ8a/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "5a434785c4c11876ab378ee0c24bd68f", "detail": {}}, "uuid": "be1008a8-e545-11ee-af27-059bf2cc6cd2", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx9VoQ-hwIR4STUicVwCbDKA"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:36:57.092Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "7b5223c6d01d72cda988136c10187fc2", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "1b1bcb63c9ce7b5a355618290a71637d", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "1b1bcb63c9ce7b5a355618290a71637d", "detail": {}}, "uuid": "bc5f2509-e545-11ee-a341-7ba2bd86d3b9", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxYqQUvGzUQd-bMMkvpCN5Ig"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:36:46.636Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "ebfb63074ad0a9ef9d12a326caea9765", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "b605c7dce6426ee227deff57b13d23c4", "authenticatorMethodChallengeTime": "2024-03-18T16:36:44.274Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/fteFUh_VSH-HUcx1wuo0a1nocUcAZSJVl1/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/fteFUh_VSH-HUcx1wuo0a1nocUcAZSJVl1/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "b605c7dce6426ee227deff57b13d23c4", "detail": {}}, "uuid": "b623aec1-e545-11ee-ad44-5d52888d2391", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxYqQUvGzUQd-bMMkvpCN5Ig"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:36:44.268Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "ebfb63074ad0a9ef9d12a326caea9765", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "cd2acba4a55abff673f19adbe615e05e", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "cd2acba4a55abff673f19adbe615e05e", "detail": {}}, "uuid": "b4ba5ac1-e545-11ee-9ea8-2d0a886a3f96", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxr_BgiPSvQDKcuFdg8Pnl7g"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:36:37.908Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "e4ae08fa2993dcbc08b9a30ec15d0ef5", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "6ab8448101d162d6b4098887e8f6585e", "authenticatorMethodChallengeTime": "2024-03-18T16:36:35.392Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftgoKl7ffM-ISxHBknKXwZUoOKelyAr0NY/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftgoKl7ffM-ISxHBknKXwZUoOKelyAr0NY/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "6ab8448101d162d6b4098887e8f6585e", "detail": {}}, "uuid": "b0efe5ae-e545-11ee-8134-8d606dca44b6", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxr_BgiPSvQDKcuFdg8Pnl7g"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:36:35.386Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "e4ae08fa2993dcbc08b9a30ec15d0ef5", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "eab6cdf3d365ec8a7f9df28f8d04fdda", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "eab6cdf3d365ec8a7f9df28f8d04fdda", "detail": {}}, "uuid": "af6f11d1-e545-11ee-b86e-8fd304f3cb55", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxMacAt3cTQYWDHhaTuTGbkA"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:36:29.029Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "5f1c7c8d0935a5df750a3467ad6ca786", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "dddccd28d7a03a6eeb0f1b46d2ae001f", "authenticatorMethodChallengeTime": "2024-03-18T16:36:26.636Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftYV5jF6URyWfkDSr13LjT4YtNlvqiyP7C/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftYV5jF6URyWfkDSr13LjT4YtNlvqiyP7C/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "dddccd28d7a03a6eeb0f1b46d2ae001f", "detail": {}}, "uuid": "aba51182-e545-11ee-a29b-0b487296a194", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxMacAt3cTQYWDHhaTuTGbkA"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:36:26.630Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "5f1c7c8d0935a5df750a3467ad6ca786", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "a9bc0de49c347157dcf86e339ba4592b", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "a9bc0de49c347157dcf86e339ba4592b", "detail": {}}, "uuid": "aa3702aa-e545-11ee-9ea8-2d0a886a3f96", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxQLBiTrlKTR2LGkZARZHWKg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:36:19.170Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "5edb4f5710b13979e84a213039979ebe", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "9e0ac7ab7dc642922b8b110978b0c335", "authenticatorMethodChallengeTime": "2024-03-18T16:36:15.310Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftdKHR_YPD5tvfhol5MUN8ZriEcp9p9Fcq/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftdKHR_YPD5tvfhol5MUN8ZriEcp9p9Fcq/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "9e0ac7ab7dc642922b8b110978b0c335", "detail": {}}, "uuid": "a5c4b456-e545-11ee-82ed-2f53ab266409", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxQLBiTrlKTR2LGkZARZHWKg"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:36:15.304Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "5edb4f5710b13979e84a213039979ebe", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "5a0e7307934702ccf10d4ee812580457", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "5a0e7307934702ccf10d4ee812580457", "detail": {}}, "uuid": "a376cd2d-e545-11ee-8166-33ed5ac006d4", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxwy-iy_EOTbi-fV5HbsEnpw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-18T16:36:07.663Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "8a4b22316c7cc474f46f5074468da0a3", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "f95a8f7e566f31ae3f6d6428e9a07eea", "authenticatorMethodChallengeTime": "2024-03-18T16:36:01.357Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftb87Z0bxdVqxrnc10NMQn9MKLEwETFtW1/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/ftb87Z0bxdVqxrnc10NMQn9MKLEwETFtW1/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "f95a8f7e566f31ae3f6d6428e9a07eea", "detail": {}}, "uuid": "9ee8e075-e545-11ee-bdd9-bf3debb536ee", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxwy-iy_EOTbi-fV5HbsEnpw"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T16:36:01.353Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "8a4b22316c7cc474f46f5074468da0a3", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "0adf8714fb1cf923504bf8a82d214aa1", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "0adf8714fb1cf923504bf8a82d214aa1", "detail": {}}, "uuid": "9b260c76-e545-11ee-8d7d-b39a44a2dc97", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}
{"actor": {"id": "00ufgmc7x27vTGT1L5d7", "type": "User", "alternateId": "user12@splunkresearch.com", "displayName": "hackpsy strt", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Dalvik/2.1.0 (Linux; U; Android 12; HD1901 Build/SKQ1.211113.001)OktaVerify OWMjPbFxRhm/xj15vL3ogg/7.29.0", "os": "Android", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "23.93.210.147", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94606", "geolocation": {"lat": 37.7906, "lon": -122.2412}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxiiDSIWJxR--Gvc_e3e6IXQ"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T15:56:55.741Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "4b50bc908ea78ffc33288a9682149e7e", "pushOnlyResponseType": "OV_RESPONSE_APPROVE", "requestId": "b319c51dd264b0b5ac056b9a1936dec2", "authenticatorMethodChallengeTime": "2024-03-18T15:56:38.329Z", "requestUri": "/api/v1/authn/factors/opffgmihdpOV9TC365d7/transactions/ftL_oefy67VTwBTevVpvOs-pKCbaoeYxWg/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffgmihdpOV9TC365d7/transactions/ftL_oefy67VTwBTevVpvOs-pKCbaoeYxWg/verify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "b319c51dd264b0b5ac056b9a1936dec2", "detail": {}}, "uuid": "250e0fb6-e540-11ee-9193-d71346744bcd", "version": "0", "request": {"ipChain": [{"ip": "23.93.210.147", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94606", "geolocation": {"lat": 37.7906, "lon": -122.2412}}, "version": "V4", "source": null}]}, "target": [{"id": "00ufgmc7x27vTGT1L5d7", "type": "User", "alternateId": "user12@splunkresearch.com", "displayName": "hackpsy strt", "detailEntry": null}, {"id": "pfdfgmihdnnSNSsAU5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification", "methodUsedVerifiedProperties": "[USER_PRESENCE, DEVICE_BOUND, HARDWARE_PROTECTED]"}}]}
{"actor": {"id": "00ufgmc7x27vTGT1L5d7", "type": "User", "alternateId": "user12@splunkresearch.com", "displayName": "hackpsy strt", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 13.4.0 (Ventura)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "23.93.210.147", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94606", "geolocation": {"lat": 37.7906, "lon": -122.2412}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxiiDSIWJxR--Gvc_e3e6IXQ"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T15:56:38.322Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_Android", "authnRequestId": "4b50bc908ea78ffc33288a9682149e7e", "deviceFingerprint": "80a0b9791894c70187c024a341cc69cf", "behaviors": "{New Geo-Location=NEGATIVE, New Device=POSITIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "c609cf63f0adde040076bb7a3113208e", "dtHash": "5a60c5862cb128432dca3ac69c1b896d47690b9891501bf68f059647f4bda318", "risk": "{level=LOW}", "devicePlatform": "ANDROID", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "c609cf63f0adde040076bb7a3113208e", "detail": {}}, "uuid": "1aac21ed-e540-11ee-82ed-2f53ab266409", "version": "0", "request": {"ipChain": [{"ip": "23.93.210.147", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94606", "geolocation": {"lat": 37.7906, "lon": -122.2412}}, "version": "V4", "source": null}]}, "target": [{"id": "00ufgmc7x27vTGT1L5d7", "type": "User", "alternateId": "user12@splunkresearch.com", "displayName": "hackpsy strt", "detailEntry": null}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxrqHou_Z9T7qXzaVeH4-qOQ"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T15:47:42.439Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "5ff9c41a9b7ba24e6a0612e9580bf6ca", "pushOnlyResponseType": "OV_RESPONSE_APPROVE", "requestId": "fc12da63f582386f94de5e123bde5234", "authenticatorMethodChallengeTime": "2024-03-18T15:47:33.961Z", "requestUri": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/fts2_aAbt3pj7YDNOKWN-KrVJ-Hq4Ct4UJ/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffva38aqx1olrMd5d7/transactions/fts2_aAbt3pj7YDNOKWN-KrVJ-Hq4Ct4UJ/verify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "fc12da63f582386f94de5e123bde5234", "detail": {}}, "uuid": "db42df76-e53e-11ee-b23f-c1595244d6a2", "version": "0", "request": {"ipChain": [{"ip": "100.1.121.33", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, {"id": "pfdfva38ao6fKzJFK5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification", "methodUsedVerifiedProperties": "[USER_PRESENCE, DEVICE_BOUND, HARDWARE_PROTECTED]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxrqHou_Z9T7qXzaVeH4-qOQ"}, "displayMessage": "A push was sent to a user for verification", "eventType": "system.push.send_factor_verify_push", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-18T15:47:33.942Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"deviceCategory": "SmartPhone_IPhone", "authnRequestId": "5ff9c41a9b7ba24e6a0612e9580bf6ca", "deviceFingerprint": "7e7db00e81e5022827c4182af7e8a2ba", "behaviors": "{New Geo-Location=NEGATIVE, New Device=NEGATIVE, New IP=NEGATIVE, New State=NEGATIVE, New Country=NEGATIVE, Velocity=NEGATIVE, New City=NEGATIVE}", "requestId": "9fdd2de89b1e3269a2f764c0b897485f", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "risk": "{level=LOW}", "devicePlatform": "IOS", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "url": "/idp/idx/identify?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "9fdd2de89b1e3269a2f764c0b897485f", "detail": {}}, "uuid": "d63255a2-e53e-11ee-8f81-edc0b921b37a", "version": "0", "request": {"ipChain": [{"ip": "72.43.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "User 15", "detailEntry": null}]}